中不溜儿的一堆

soyank

[:27:]

The EQs

Scan performed at: 2007-6-2 12:01:13
Scanning Log
NOD32 version 2305 (20070601) NT
Command line: C:\Documents and Settings\EQ2\桌面\vir.rar
Operating memory - is OK

Date: 2.6.2007  Time: 12:01:17
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\vir.rar
C:\Documents and Settings\EQ2\桌面\vir.rar ?RAR ?nwizAsktao.exe - a variant of Win32/PSW.Agent.NEW trojan
C:\Documents and Settings\EQ2\桌面\vir.rar ?RAR ?nwizzhuxians.exe - a variant of Win32/PSW.Agent.NEW trojan
C:\Documents and Settings\EQ2\桌面\vir.rar ?RAR ?AVPSrv.exe - Win32/PSW.OnLineGames.NAG trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\vir.rar ?RAR ?nwizqjsj.exe - a variant of Win32/PSW.Agent.NEW trojan
C:\Documents and Settings\EQ2\桌面\vir.rar ?RAR ?nwizqqfo.exe - a variant of Win32/PSW.Agent.NEW trojan
C:\Documents and Settings\EQ2\桌面\vir.rar ?RAR ?systemm.exe - Win32/Agent.NEM trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\vir.rar ?RAR ?wincdb.exe - a variant of Win32/PSW.OnLineGames.NAG trojan
Number of scanned files: 10
Number of threats found: 7
Number of files cleaned: 1
Time of completion: 12:01:19 Total scanning time: 2 sec (00:00:02)

promised

漏一个
Ctrl-C will terminate program execution

*:
C:\
C:\ABC\vir.rar:<RAR>\nwizAsktao.exe : is suspected of Downloader.Small.160
C:\ABC\vir.rar:<RAR>\nwizzhuxians.exe : is suspected of Downloader.Small.160
C:\ABC\vir.rar:<RAR>\AVPSrv.exe : infected Trojan-PSW.Win32.OnLineGames.qy
C:\ABC\vir.rar:<RAR>\nwizqjsj.exe : is suspected of Downloader.Small.160
C:\ABC\vir.rar:<RAR>\nwizqqfo.exe : infected Trojan-PSW.Win32.OnLineGames.sl
C:\ABC\vir.rar:<RAR>\svchost.EXE : infected Trojan.PWS.Qqrobber.28
C:\ABC\vir.rar:<RAR>\systemm.exe : infected Backdoor.Win32.Agent.alh
C:\ABC\vir.rar:<RAR>\wincdb.exe : infected Trojan.PWS.Wsgame
Program execution terminated by user


Directories       : 4       Files in archives:      Files on disks:
Archives:                   - total       : 11      - total       : 24
- scanned         : 3       -  scanned    : 11      - scanned     : 24
- contain viruses : 1       -  infected   : 5       - infected    : 1
- deleted         : 0       -  suspicious : 3       - suspicious  : 0

Startup    : 12:01:23 02-06-2007
End        : 12:01:29 02-06-2007
Total time : 00:00:06
终止批处理操作吗(Y/N)?

欠妳緈諨

2个

foxhound

AVG Anti-Spyware 7.5的扫描报告

F:\vir.rar/systemm.exe -> Backdoor.Agent.alh : 已清除.
F:\vir.rar/svchost.EXE -> Trojan.Crypt.k : 已清除.
F:\vir.rar/wincdb.exe -> Trojan.OnLineGames.es : 已清除.
F:\vir.rar/AVPSrv.exe -> Trojan.OnLineGames.qy : 已清除.
F:\vir.rar/nwizAsktao.exe -> Trojan.WOW.qp : 已清除.
F:\vir.rar/nwizqqfo.exe -> Trojan.WOW.qp : 已清除.

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\vir.rar'
C:\Documents and Settings\morgan\My Documents\
  vir.rar
    [0] Archive type: RAR
    --> nw16.exe
    --> nwizAsktao.exe
        [DETECTION] Is the Trojan horse TR/Agent.8704.28
        [WARNING]   Infected files in archives cannot be repaired!
    --> nwizzhuxians.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> AVPSrv.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.QY.162
        [WARNING]   Infected files in archives cannot be repaired!
    --> nwizqjsj.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.AUP.44
        [WARNING]   Infected files in archives cannot be repaired!
    --> nwizqqfo.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.SL.2
        [WARNING]   Infected files in archives cannot be repaired!
    --> svchost.EXE
        [DETECTION] Is the Trojan horse TR/PSW.WOW.EC.142
        [WARNING]   Infected files in archives cannot be repaired!
    --> systemm.exe
        [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.alh.6 Backdoor server programs
        [WARNING]   Infected files in archives cannot be repaired!
    --> wincdb.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.ASY.14
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!

wangjay1980

1

红心王子

费尔8个
三个启发式

bridgewr

微点8个，nw16.exe就开了个dos窗口，没有其他动作

woai_jolin

ess漏1个
2007/6/2 12:49:59        Scanning Log
2007/6/2 12:49:59        Version of virus signature database: 2305 (20070601)
2007/6/2 12:49:59        Date: 2.6.2007  Time: 12:49:59
2007/6/2 12:49:59        Scanned disks, folders and files: E:\
2007/6/2 12:50:19        E:\病毒测试\vir.rar - multiple threats - deleted - quarantined
2007/6/2 12:50:19        E:\病毒测试\vir.rar &raquo; RAR &raquo; nwizAsktao.exe - a variant of Win32/PSW.Agent.NEW trojan
2007/6/2 12:50:19        E:\病毒测试\vir.rar &raquo; RAR &raquo; nwizzhuxians.exe - a variant of Win32/PSW.Agent.NEW trojan
2007/6/2 12:50:19        E:\病毒测试\vir.rar &raquo; RAR &raquo; AVPSrv.exe - Win32/PSW.OnLineGames.NAG trojan
2007/6/2 12:50:19        E:\病毒测试\vir.rar &raquo; RAR &raquo; nwizqjsj.exe - a variant of Win32/PSW.Agent.NEW trojan
2007/6/2 12:50:19        E:\病毒测试\vir.rar &raquo; RAR &raquo; nwizqqfo.exe - a variant of Win32/PSW.Agent.NEW trojan
2007/6/2 12:50:19        E:\病毒测试\vir.rar &raquo; RAR &raquo; systemm.exe - Win32/Agent.NEM trojan
2007/6/2 12:50:19        E:\病毒测试\vir.rar &raquo; RAR &raquo; wincdb.exe - a variant of Win32/PSW.OnLineGames.NAG trojan
2007/6/2 12:50:19        Number of scanned files: 87
2007/6/2 12:50:19        Number of threats found: 7
2007/6/2 12:50:19        Time of completion: 12:50:19  Total scanning time: 20 sec (00:00:20)